Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

I'vew been having some trouble with the removal of a trojan or a malware program. So far this is what it is doing that I know of, and what I have done to remove it (without success). Your help is greatly appreciated.

- it deleted the exe files for Norton and will not allow me to reinstal or do updates.

- it deleted spybot exe as soon as it is downloaded and installed.

- it deleted avast exe file as soon as it is installed.

- it prevents safemode bootup. It produces a blue screen and reboots.

- It provides pop-ups from ad.theadhost.com

I managed to utilize the minimized screen version of avast and it found several trojan viruses which it said it fixed.

I also ran:

CA Antivirus scan (online version)
Ad-aware (found nothing)
ATF Cleaner
FXBeagle fix from Symantic (because I thought it was this virus...but the cleaner said it was clean)
AVG Antivirus found about 15 trojans viruses and said it cleaned them. The Resident Shield option will not work.
TrojanHunter found 2 and said it cleaned them.

I rebooted and thoguht I had gotten rid of it and I still cannot load up spybot or avast and the pop up ads keep coming back.

I narrowed it down to these viruses but I am sure there was and is more...

worm.bagle.il
trojan glieder

After doing some online scans with Panda's Active Scan and AVG's scans I managed to get rid of the one that was blocking Avast and Spybot. I downloaded and ran spybot without any problems. It found several malware programs and deleted them. I am going to do an avast bootscan shortly. AVG Antispyware found a small bunch of tracking cookies - nothing more. Trojan Hunter found nothing.

Norton got completely corrupted and is unusable. Yah Norton.

Here is the GMER file you request. I also attached an updated hijack this log.

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.